Bug in Post thanks - not secure!
 

Hi,
I find a bug/vuln. in Thank plugin! Its not secure!
Plz check for updates(Patch).

http://www.talkphp.com/post_thanks.p..._thanks_add&u='

GL.

Thanks for pointing this out. However, hmm, I get a "Content Encoding Error" error for that. How does this URL differ from the one on the "Say Thanks" button, apart from you've substituted the p parameter for u?

lol!
Iam not a hacker! But you know about hackers?
Do you think, Hackers uisng standard URL browsing??
This plugin is not secure(Patch needed) And this is a BUG!
GL.

Please explain the actual vulnerability, what harm can be done?